Cross-site HTTP requests via Firebase